Braidz IQ Privacy Policy

1. Information We Collect

Information you provide: - Account registration: name, email, phone, password - Profile: location, profile photo, biography - Hair profile (Customers): curl type, hair length, density, hair state - Portfolio (Braiders): photos, style descriptions, pricing, availability - Payment information processed by Stripe (we do not store full card numbers) - Government ID collected by Stripe Identity for Braider verification - Messages, reviews, ratings, and voice/text inputs to AI features

Collected automatically: - Device, browser, and operating system - Usage analytics: pages visited, features used, time spent - Approximate location for matching (precise location only with explicit permission) - IP address, access times, referring URLs, and cookies

2. How We Use Your Information

To create and manage your account, provide the AI matching service, process payments, operate the AI Braid Care module, send booking notifications, verify Braider identity, prevent fraud, improve the Platform, send marketing communications (with consent you may withdraw), comply with legal obligations, and resolve disputes.

3. Sharing Your Information

We share information between Customer and Braider only as necessary to complete a booking. Service providers including Stripe (payments), Supabase (data storage), Cloudflare (security/CDN), and Anthropic (AI) receive information under contractual privacy obligations. We may disclose information when required by law or to protect users.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Data Retention

• Account data: while account is active plus 90 days after deletion
• Booking and payment records: 7 years for financial and tax compliance
• Audit logs: 3 years
• Marketing preferences: until you opt out or request deletion

5. Your Rights

Depending on your location you may have rights to access, correct, delete, port, restrict, or opt out of processing of your personal information. Submit requests at policy@braidziq.com. We respond within 30 days and may require identity verification.

6. Data Security

We implement industry-standard safeguards including AES-256 encryption at rest, TLS encryption in transit, multi-factor authentication options, row-level security, regular security audits, and Cloudflare WAF protection. No method of transmission is 100% secure and we cannot guarantee absolute security.

7. Children's Privacy

The Platform is not intended for persons under 18. We do not knowingly collect personal information from children under 18 and will delete any such information promptly upon discovery.

8. California Privacy Rights (CCPA)

California residents have rights to know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell), and to non-discrimination for exercising CCPA rights. Contact policy@braidziq.com to exercise these rights.

9. Contact

policy@braidziq.com | Flipping Innovations, LLC | Atlanta, Georgia